CyberStrikeus/CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

About the project

CyberStrike is an open-source AI security harness that automates penetration testing by using language models as agents for reconnaissance, vulnerability discovery, exploitation, and reporting. Security practitioners use it to test systems from a terminal, and the catalogue contains skills and settings for its workflow.

This repository also configures its own agents. See what CyberStrike tells them →

2.7kStars on the repository
200Mods indexed here, across every type
yesterdayLast push, which is what freshness is scored on
AGPL-3.0Licence, which decides whether bodies are shown

cis-aws-compute-3.7

121

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure logging is configured for Amazon ECS task definitions.

not rated 2.7k +117 yesterday A SkillSpector: pass 19 tokens AGPL-3.0

cis-aws-compute-3.8

122

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Amazon ECS Fargate services are using the latest Fargate platform version.

not rated 2.7k +117 yesterday A SkillSpector: pass 26 tokens AGPL-3.0

cis-aws-compute-5.11

126

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure your Windows Server based lightsail instances are updated with the latest security patches.

not rated 2.7k +117 yesterday A SkillSpector: warn 25 tokens AGPL-3.0

cis-aws-compute-5.12

127

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Change the auto-generated password for Windows based instances.

not rated 2.7k +117 yesterday A SkillSpector: warn 19 tokens AGPL-3.0

cis-aws-compute-5.2

128

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Change default Administrator login names and passwords for applications.

not rated 2.7k +117 yesterday A SkillSpector: warn 19 tokens AGPL-3.0

cis-aws-compute-5.3

129

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Disable SSH and RDP ports for Lightsail instances when not needed.

not rated 2.7k +117 yesterday A SkillSpector: warn 23 tokens AGPL-3.0

cis-aws-compute-5.4

130

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure SSH is restricted to only IP address that should have this access.

not rated 2.7k +117 yesterday A SkillSpector: warn 23 tokens AGPL-3.0

cis-aws-compute-5.5

131

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure RDP is restricted to only IP address that should have this access.

not rated 2.7k +117 yesterday A SkillSpector: warn 24 tokens AGPL-3.0

cis-aws-compute-5.6

132

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Disable IPv6 Networking if not in use within your organization.

not rated 2.7k +117 yesterday A SkillSpector: warn 21 tokens AGPL-3.0

cis-aws-compute-5.7

133

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure you are using an IAM policy to manage access to buckets in Lightsail.

not rated 2.7k +117 yesterday A SkillSpector: warn 25 tokens AGPL-3.0

cis-aws-compute-5.8

134

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Lightsail instances are attached to the buckets.

not rated 2.7k +117 yesterday A SkillSpector: warn 19 tokens AGPL-3.0

cis-aws-compute-5.9

135

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure that your Lightsail buckets are not publicly accessible.

not rated 2.7k +117 yesterday A SkillSpector: warn 20 tokens AGPL-3.0

cis-aws-compute-6.1

136

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure you are using VPC Endpoints for source code access.

not rated 2.7k +117 yesterday A SkillSpector: pass 22 tokens AGPL-3.0

cis-aws-compute-8.1

137

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure AWS Batch is configured with AWS CloudWatch Logs.

not rated 2.7k +117 yesterday A SkillSpector: pass 20 tokens AGPL-3.0

cis-aws-compute-8.2

138

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure Batch roles are configured for cross-service confused deputy prevention.

not rated 2.7k +117 yesterday A SkillSpector: pass 21 tokens AGPL-3.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: